Privacy Policy

Yummy Istanbul respects your privacy and handles your personal information carefully. This Privacy Policy explains what information we collect, why we collect it, how we use and share it, and the rights you may have.

Yummy Istanbul is operated by ASYAMEL TURİZM VE REHBERLİK TİCARET LİMİTED ŞİRKETİ, a company registered in Türkiye. In this policy, “Yummy Istanbul,” “we,” “us,” and “our” refer to that company.

This policy applies when you:

• Visit yummyistanbul.com
• Book or inquire about one of our tours
• Use our Rezdy booking pages
• Contact us by email or through a website form
• Subscribe to our Istanbul Food Guide or marketing emails
• Apply to work with us
• Join one of our tours
• Otherwise communicate or interact with us

1. Information we collect

Information you provide when booking

When you book a tour, we may receive:

• Your name
• Email address
• Telephone number
• Country or general location
• Tour date, chosen tour, and number of guests
• Names or ages of other guests where required
• Dietary requirements, food allergies, or accessibility needs
• Booking notes and requests
• Payment status, transaction reference, and limited payment information
• Communications relating to your booking

Bookings are processed through Rezdy and its payment partners. Your complete card number and card security code are entered directly into the payment provider's system. We do not normally receive or store your complete card details.

If another person makes a booking for you, we may receive your information from that person. The person making the booking must have permission to provide information about the other guests.

Dietary, allergy, and accessibility information

You may choose to tell us about allergies, dietary requirements, disabilities, pregnancy, medical conditions, or accessibility needs so we can advise you and prepare for your tour.

Some of this may be considered sensitive personal information. We only use it to:

• Assess whether the tour is suitable
• Help accommodate your requirements
• Inform the guide and relevant food venues
• Protect your health and safety

Where required by law, we process this information with your consent. In an emergency, we may use it to protect your vital interests or those of another person.

Please only provide information that is relevant to your participation in the tour.

Inquiries and communications

When you contact us, we may collect:

• Your name
• Email address
• Telephone number
• The contents of your message
• Preferred dates and tour
• Group size
• Details of your private or corporate event
• Our correspondence with you

Information submitted through our contact form is used to answer your inquiry. It is not automatically added to our marketing list.

Food Guide and email subscriptions

When you request our free Istanbul Food Guide or subscribe to our emails, we collect your email address and information about your subscription, such as when and where you subscribed.

We use this information to send the guide and occasional Istanbul food, travel, and tour information. You can unsubscribe at any time by using the link in an email or contacting us.

Job applications

Our work-with-us page may direct applicants to a form operated by Google. If you apply, we may receive:

• Your name and contact details
• Work history and qualifications
• Tour-guiding license information
• Languages and availability
• Your answers to application questions
• Your resume, photograph, or other documents you choose to provide

Google also processes information submitted through Google Forms according to its own privacy policy.

Information from booking partners

If you book through a third-party travel company or marketplace, we may receive information needed to operate your tour from partners such as Viator, Tripadvisor, GetYourGuide, Airbnb, or travel agents.

This can include your name, contact details, booking information, group information, and dietary requirements.

Those companies handle your information under their own privacy policies when you book through them.

Website and technical information

When you visit our website, our hosting and security providers may automatically collect:

• IP address
• Browser and device type
• Operating system
• Pages visited
• Date and time of access
• Referring website
• Approximate location derived from your IP address
• Website errors and security information

We do not use the website to request your device's precise GPS location.

When analytics and advertising measurement run (see section 4), Google and Meta services may also receive:

• Advertising click and browser identifiers, such as gclid, fbclid, _fbp, and _fbc, when permitted by your consent choice
• Pages viewed and interactions with the website
• Your cookie and consent choices
• Booking transaction number, value, and currency through our conversion measurement
• Audience-segment membership, where remarketing audiences are enabled

Photos, video, and reviews

We sometimes take photographs or short videos during our tours for our website and social media.

If you do not want to appear, please tell your guide at the beginning of the tour. We will respect your request. We may ask for additional permission before using a close-up image or material that focuses specifically on you.

After your tour, we may invite you to leave a review. Providing a review is optional. If we want to use your name, review, or other personal information outside the platform where it was originally posted, we will obtain permission where required.

2. How we use your information

We may use personal information to:

• Confirm, manage, and deliver bookings
• Take and process payments
• Communicate meeting points, changes, and important tour information
• Respond to questions and private-tour inquiries
• Accommodate dietary and accessibility requirements
• Keep guests, guides, and venues safe
• Manage cancellations, refunds, complaints, and disputes
• Send requested guides and marketing emails
• Ask guests for feedback or reviews
• Improve our tours, website, and customer service
• Prevent fraud, spam, misuse, and security incidents
• Maintain financial, tax, and business records
• Recruit guides and other team members
• Establish, exercise, or defend legal claims
• Comply with legal and regulatory obligations

3. Our legal reasons for processing information

Depending on the situation and applicable law, we process personal information on one or more of these grounds:

• Contract: To take steps before a booking and provide the tour you purchased.
• Legal obligation: To comply with tax, accounting, consumer protection, and other laws.
• Legitimate interests: To operate and improve our business, answer inquiries, prevent fraud, secure our website, and provide customer service.
• Consent: For marketing emails and certain sensitive information or promotional uses.
• Vital interests: To protect someone's health or safety in an emergency.

You may withdraw consent at any time. Withdrawing consent does not make earlier processing unlawful.

4. Cookies and analytics

We keep this website light on tracking, and we are transparent about what runs. Cloudflare or other essential services may use strictly necessary technologies for security and basic website operation.

We use Google Analytics 4 and Google Ads conversion measurement to understand how visitors find us and whether our advertising leads to bookings. These services can set cookies and collect information such as pages visited, approximate location, device information, and identifiers connected to ad clicks. Booking pages hosted by Rezdy also use Google Analytics through Rezdy's integration.

We also use Meta Pixel and Meta Conversions API to understand whether advertising on Facebook and Instagram leads to tour-page visits, booking attempts, and confirmed bookings. Meta Pixel measures permitted browser activity on yummyistanbul.com. Meta Conversions API receives a server-side Purchase event only after a Rezdy order reaches confirmed status.

The server-side Purchase event is limited to the order number, value, currency, product and quantity information, and permitted Facebook click or browser identifiers. We do not currently send payment-card details, names, email addresses, telephone numbers, dietary requirements, or other booking-form contents to Meta for advertising measurement.

We do not send payment-card details, names, email addresses, telephone numbers, dietary requirements, or other booking-form contents to Google or Meta through our advertising measurement. Conversion information is limited to the information described above.

Declining browser-based analytics and advertising cookies never prevents you from browsing the website or booking a tour. Where enabled, Google Ads and Meta may use permitted website-visit information to measure advertising or build audiences of previous visitors.

You can read how Google uses data from sites that use its services at policies.google.com/technologies/partner-sites, and manage personalized advertising through Google's My Ad Center.

You can read how Meta handles information in the Meta Privacy Policy and manage advertising preferences through your Facebook or Instagram settings.

We use Google's Consent Mode and apply the same browser-measurement choice to Meta Pixel. If you are in the European Economic Area, the United Kingdom, or Switzerland, these browser technologies are not loaded until you choose “Accept” in our cookie notice. Elsewhere, they run by default unless you have declined. You can change your choice at any time using the “Cookie settings” link in the footer.

We also use Cloudflare Web Analytics, a privacy-first measurement tool. It works without cookies, does not follow you across other websites, and does not build a profile of you.

Essential technologies may still be used where strictly necessary for security and basic operation, for example to protect our forms from spam.

Some optional third-party content can set its own cookies once you choose to load it; this is described in the next section. You can also restrict or delete cookies at any time through your browser settings.

We do not sell personal information, and we do not use it for third-party advertising networks beyond the Google and Meta services described above.

5. Embedded content and external websites

Our website contains links to other websites and services.

A few pages include content from other companies, which stays inactive until you use it:

• YouTube videos use privacy-enhanced embeds and are not loaded until you choose to play them. When you press play, Google or YouTube may receive technical information about your device and visit.
• Google Maps may be used to show meeting points, and it may set cookies once the map loads.
• The Rezdy booking widget loads when you start a booking and operates under Rezdy's privacy policy.

External websites have their own privacy practices. We are not responsible for how they collect or use information after you leave our website.

6. Who we share information with

We only share personal information when reasonably necessary.

Recipients may include:

• Rezdy, which provides our booking platform
• Payment providers used during checkout
• Cloudflare, which provides website hosting, delivery, security, and our cookieless analytics
• MailerLite, which manages our mailing list, sends emails, and records subscription and email-delivery information
• Resend, which delivers messages from our contact and inquiry forms to our inbox
• Google, for analytics and advertising measurement (Google Analytics 4, Google Ads), Google Forms (job applications), YouTube, and Google Maps
• Meta, for advertising measurement through Meta Pixel and Meta Conversions API
• Our authorized staff and tour guides
• Restaurants and food vendors that need relevant dietary information
• Resellers, travel agents, and booking marketplaces
• Accountants, insurers, lawyers, and professional advisers
• Government bodies, regulators, courts, or law-enforcement agencies where legally required
• A buyer or successor if our business is sold or reorganized

We do not sell or rent personal information.

Service providers are permitted to use information only for the relevant service or as otherwise allowed by law.

7. International data transfers

Yummy Istanbul operates in Türkiye and uses service providers that may process information in other countries.

Privacy laws may differ between countries. Where required, we use legally recognized safeguards for international transfers, such as contractual protections, approved transfer mechanisms, or providers operating under applicable data-transfer frameworks.

8. How long we keep information

We keep personal information only for as long as reasonably necessary for the reason it was collected.

Retention periods depend on the type of information:

• Booking, transaction, and accounting records may be retained for up to ten years where required for tax, accounting, or legal purposes.
• Inquiries are kept while we respond and for a reasonable follow-up period.
• Marketing information is kept until you unsubscribe or we decide it is no longer useful. We may retain a minimal suppression record so we do not add you back after you unsubscribe.
• Google advertising and analytics data is retained according to the settings configured in Google Analytics and Google Ads. Where remarketing audiences are enabled, audience membership can be retained for up to 540 days, though most audiences use shorter periods.
• Meta states that it may retain advertising Event Data for up to two years under its Meta Business Tools Terms. Audience retention is controlled through the relevant Meta advertising settings.
• We retain first-party Meta click-attribution records for no more than 90 days when unused and for a shorter period after they have been connected to a confirmed booking. Conversion-reconciliation records are kept only as long as reasonably necessary to prevent duplicate reporting, record cancellations, and meet applicable record-keeping obligations.
• Recruitment information is kept for a reasonable recruitment and record-keeping period.
• Information connected to a complaint or legal claim may be retained until the matter and relevant limitation periods have ended.

When information is no longer required, we delete it, anonymize it, or securely restrict access to it.

9. Security

We use reasonable technical and organizational measures to protect personal information against loss, misuse, unauthorized access, alteration, and disclosure.

However, no website, email service, or online storage system can be guaranteed to be completely secure. Please avoid sending unnecessary sensitive information by ordinary email.

10. Children

Children may join some of our tours when accompanied by a responsible adult, but bookings must be made by an adult.

Our website and marketing are not directed at children. If an adult provides information about a child in their party, they confirm that they are authorized to do so.

If you believe a child has provided personal information to us without appropriate permission, please contact us.

11. Your privacy rights

Depending on where you live, you may have the right to:

• Ask whether we process your personal information
• Request access to your information
• Ask us to correct inaccurate or incomplete information
• Request deletion of information
• Request restriction of certain processing
• Object to processing based on legitimate interests
• Withdraw consent
• Unsubscribe from marketing
• Request a portable copy of certain information
• Learn who information has been shared with
• Complain to an appropriate data-protection authority

These rights may be subject to legal exceptions. For example, we may need to retain booking records to meet tax or legal requirements.

To exercise a right, email [email protected]. We may need to verify your identity before completing a request.

You may also complain to the relevant authority in your country, including Türkiye's Personal Data Protection Authority under the KVKK.

12. Automated decisions

We do not use personal information to make solely automated decisions that produce legal or similarly significant effects.

13. Changes to this policy

We may update this Privacy Policy when our website, services, providers, or legal obligations change.

The latest version will always be published on this page. The “Last updated” date at the top shows when it was most recently revised.

14. Contact us

For questions, requests, or complaints about privacy, contact:

Yummy Istanbul
ASYAMEL TURİZM VE REHBERLİK TİCARET LİMİTED ŞİRKETİ
Registered address: Maşukiye Mah. Manavgat Cad. No: 76, Kartepe, Kocaeli, Türkiye
Email: [email protected]